Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Occasionally I come across servers (Windows 2003 and 2008) with high processor % interrupt time. Is there a way to see what program or device is causing the interrupts?

share|improve this question

4 Answers 4

If you can handle low-level system tools;

Windows Performance Analyzer (WPA)

Windows Performance Analyzer (WPA) is a set of performance monitoring tools used to produce in-depth performance profiles of Microsoft Windows operating systems and applications.

After you learn how to use xperf; check out;

The DPC/ISR Action

The DPC/ISR action produces a text report that summarizes the various metrics regarding DPCs and ISRs. The usage for this action is:

Copy Code -a dpcisr [-dpc -isr -summary -interval [n] -bucket [n] -range T1 T2 ]

Option

Description

dpc

Show statistics for DPC only

isr

Show statistics for ISR only

summary

Show summary report

interval [dt]

Show usage report for intervals of dt, default is 1 second

bucket [dt]

Show histogram for intervals of dt, default is 2 seconds

range T1 T2

Show delays between T1 and T2

If no data type is specified, default is to show report for both DPC

and ISR. If no report type is specified, default is to print all three kinds of report.

share|improve this answer

Here's the best article I've found on how to do this, with tutorials, screenshots, and download links to the relevant tools:

http://www.msfn.org/board/topic/140263-how-to-get-the-cause-of-high-cpu-usage-by-dpc-interrupt/

share|improve this answer
    
Welcome to Server Fault! Generally we like answers on the site to be able to stand on their own - Links are great, but if that link ever breaks the answer should have enough information to still be helpful. Please consider editing your answer to include more detail. See the FAQ for more info. –  slm May 15 '13 at 21:40

After digging through the documentation (based on the other answers here), this is the process I ended up using:

  1. Start xperf tracing

    xperf -on base+interrupt
    

    Note, you will need to close Process Monitor or any other app which uses ETW or you will get the following error: xperf: error: NT Kernel Logger: Cannot create a file when that file already exists. (0xb7).

  2. Save the trace log

    xperf -d interrupt_trace.etl
    
  3. Open the trace in Windows Performance Analyzer (part of Windows Performance Toolkit); some places mention using xperfview instead.

  4. Expand Computation -> CPU Usage -> DPC and ISR Usage by Module, Stack, right-click and add graph to analysis view

    enter image description here

  5. This pointed right to the driver in question. In this case, HDAudBus.sys is using a constant 10.82% of my cpu via interrupts, which is exactly what Process Explorer was showing me.

share|improve this answer

Have a look at the Windows Process Explorer:

http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx

That should help.

share|improve this answer
1  
Process Explorer shows how much processor time is spent serving interrupts, but it doesn't, as far as I can tell, provide a way of determining what is causing the interrupts. –  jlupolt Jan 19 '10 at 18:23

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.